NL-ALT Config FAQ (or: How do I add nl-alt to my newsserver?)
Thijs Kinkhorst
-----BEGIN PGP SIGNED MESSAGE-----
The previously posted version was full of errors due to a
communication problem. This one should be fine now. If you discover
any mistakes in this FAQ (even spelling!), please mail them to
th...@kink.xs4all.nl. Thanks in advance.
NL-ALT CONFIG FAQ (or: how do I add nl-alt to my newsserver?)
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This documented is intended to act as a guideline for newsadmins
who want to add the nl-alt.* hierarchy to their newsservers. It
describes the procedure for INN; users of other software should
however be able to figure things out from this document too.
1. Who maintains the nl-alt hierarchy?
======================================
No-one does. As the alt hierarchy, everyone is free to newgroup,
as long as they follow the guidelines. These guidelines are being
posted regularly to nl-alt.config.admin. They consist of some minimum
requirements for group creation, which includes discussion in
nl-alt.config.newsgroups. There are also guidelines for group removal,
and lots of other technical issues.
2. How do I configure my newssite for the nl-alt hierarchy?
===========================================================
This section descibes four different ways to configure your site. They
are described in detail below. Each contains some code to be added to
INN's control.ctl file.
Configuration 1: standard, with PGP
- -----------------------------------
This configuration is the advised one to use. Everyone is free to
newgroup, and rmgroups will be mailed to you for approval, unless they
originate from a trusted source. In the latter case, they will be
pgpverified.
### start nl-alt config 1 ###
newgroup:*:nl-alt.*:doit=newgroup
rmgroup:*:nl-alt.*:mail
# Onno Hovers (on...@surfer.xs4all.nl)
rmgroup:nl-alt-...@surfer.xs4all.nl:nl-alt.*:verify-nl-alt.config.
admin
# Thijs Kinkhorst (th...@kink.xs4all.nl)
rmgroup:ne...@kink.xs4all.nl:nl-alt.*:verify-nl-alt.config.admin
### end nl-alt config 1 ###
Configuration 2: standard, without PGP
- --------------------------------------
The same as above, but for sites that don't have pgpverify
installed.
### start nl-alt config 2 ###
newgroup:*:nl-alt.*:doit=newgroup
rmgroup:*:nl-alt.*:mail
rmgroup:nl-alt-...@surfer.xs4all.nl:nl-alt.*:doit=rmgroup
rmgroup:ne...@kink.xs4all.nl:nl-alt.*:doit=rmgroup
### end nl-alt config 2 ###
Configuration 3: higher security
- --------------------------------
This configuration mails all control messages to you for
approval, unless they come from a trusted source. New-
and rmgroups from trusted sources will be executed.
This configuration doesn't use PGP.
### start nl-alt config 3 ###
newgroup:*:nl-alt.*:mail
newgroup:nl-alt-...@surfer.xs4all.nl:nl-alt.*:doit=newgroup
newgroup:ne...@kink.xs4all.nl:nl-alt.*:doit=newgroup
rmgroup:*:nl-alt.*:mail
rmgroup:nl-alt-...@surfer.xs4all.nl:nl-alt.*:doit=newgroup
rmgroup:ne...@kink.xs4all.nl:nl-alt.*:doit=newgroup
### end nl-alt config 3 ###
Configuration 4: maximum security
- ---------------------------------
The same configuration as #3, but this time PGP is used to
verify the trusted source.
### start nl-alt config 4 ###
newgroup:*:nl-alt.*:mail
newgroup:nl-alt-...@surfer.xs4all.nl:nl-alt.*:verify-nl-alt.config
..admin
newgroup:ne...@kink.xs4all.nl:nl-alt.*:verify-nl-alt.config.admin
rmgroup:*:nl-alt.*:mail
rmgroup:nl-alt-...@surfer.xs4all.nl:nl-alt.*:verify-nl-alt.config.
admin rmgroup:ne...@kink.xs4all.nl:nl-alt.*:verify-nl-alt.config.admin
### end nl-alt config 4 ###
Of course you can create your own configuration from the ones
above.
3. PGP?
=======
Two of the above configurations use pgpverify, a program to
verify control messages using, surprisingly, PGP. We advise
every newsadmin to use pgpverify. More information can be
found at the following URL:
ftp://ftp.uu.net/networking/news/misc/pgpcontrol/README
This is the key that is used to sign control messages. It can
also be found at the keyservers. The fingerprint is
6B 62 EB 53 4D 5D 2F 96 35 D9 C8 9C B0 65 0E 4C
Type Bits/KeyID Date User ID
pub 1024/3EC221D1 1997/08/14 nl-alt.config.admin
- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.3i
mQCNAjPy34kAAAEEAOLpud4i137CTxC8PWAAs1rM3YwTbcc54yNkDvAkzj/w2mgq
k39WBpqNH1F4cXRk4sHmwWoRcmMR10MS1FpYQ+veVP8jrkIARsSnQC08jdcGqy3P
Va361+EtM6DDxhJauXBBlbxPbyQYTlhqgIfCi/HTxt4TTPw5STSdtFA+wiHRAAUR
tBNubC1hbHQuY29uZmlnLmFkbWluiQCVAgUQM/LfrxTrTMk3HvyxAQFhIAP/ajS3
LQ7I1/reFm1xLIMOvIWSmI3TL88UPc3EkjyjNZG0zXSmPM3xkh/nASLoowC/QDu5
wNPADs0fSe65q5fi4LulMkTys0THSd9ebd+yB5U+ggnjLnU8WX7Cln+Xln3rQz2h
L/Xye7ZsrAoYdDJrrD7l8HOGK2RNNznVYm/hH8s=
=Gk1+
- -----END PGP PUBLIC KEY BLOCK-----
4. Where can I get more information?
====================================
Some other (mostly Dutch-language) FAQs about the nl-alt hierarchy can
be found in nl-alt.informatie and nl-alt.config.admin. On a special
page a collection of documents can be found that relate to the nl-alt
hierarchy, along with some extra information. Take a look at:
http://www.xs4all.nl/~onno/nl-alt/
This document has been written by Thijs Kinkhorst. Please mail all
comments to th...@kink.xs4all.nl. Last update: 08/14/97
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
iQCVAgUBM/8KohTrTMk3HvyxAQFUVgP/QlNQrPaERyYEYoswMeJMwcKHxyJp5Uw3
APHuqgWAFViSWyVY6UGrnWC2jUh3N2fwxGbcYXUdmR/9FlE28IT1nvur8yk+FMBK
FoO4wI1umYCDuUpvbB8rfUhlKqNbBUZlSPpDgdGFsmyqcMBwq/UXhhJlQ4Hk2CwB
iprMPwEW44s=
=m+Sb
-----END PGP SIGNATURE-----
--
Thijs Kinkhorst * th...@kink.xs4all.nl * http://www.kinkhorst.com/
ICQ 432406 "I have a cunning .plan" --Baldrick KeyID 0x371EFCB1
--- Fight Spam on the Internet! http://spam-mirror.cetis.hvu.nl/ ---